Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
File:                     ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft (raw, json)
Hash identifier:          9ci+TytDHCAdTGb/aGd7hN4nxc2x0LVspQIPcv+sNDU=
Subject key identifier:   F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
Manifest number:          04B3
Signing time:             Fri 07 Jun 2024 13:30:57 +0000
Manifest this update:     Fri 07 Jun 2024 13:30:57 +0000
Manifest next update:     Mon 17 Jun 2024 13:30:57 +0000
Files and hashes:         1: -WLu_FElsfZ2TCMLaB-8L92hCzY.roa (hash: H+GXXTtNweUfWorVAu6FSRPcpqecKCC/fZq8OOg7VIA=)
                          2: 0yRrXig3xIdcOJMvxg5wSrQbZNA.roa (hash: LWfu1tWKr2XubGEOwgY7RY+sHnHQU51LlCuEoA7/xqw=)
                          3: 1ctN4PnDFbacaroCGnNWQWeOLdw.roa (hash: ByDuQbRL1E78x1CWvgGOzYEOdltho6diLpoj5yx4BfU=)
                          4: 2pwSxL04d4js0gSjEHAHJASy-tU.roa (hash: lXmCJEtJ/e5xTGwMIY7ZRiRFUWm7TJvoPP9RGpuftYg=)
                          5: 2w2TxfBggLVuG52qqbXxFlYAVao.roa (hash: OUIp0aQgXMd21fAtU4U+tNIEulBjf9dzAPBXHGNcNkk=)
                          6: 5yGc_VpnR8o-4fljOHGq-nlXfEY.roa (hash: 1KEaV55dXRuyumdbON+MheXs3SLkQAbi0E7tOih6a/o=)
                          7: 88cctbY5Q9IbWV-rQAjs3FXyoGE.roa (hash: yJj7o6WmNeTG4bkkOlgV7w8ux9HILrVbW1FuWKstwjk=)
                          8: 8tBOFglYHT4tSx244mNllWhciCM.roa (hash: 5PClXBf5DUF235ogfiIs1ziTiDNiH9hqNucobIDD5hI=)
                          9: CkNXygqC3AyDaWEcQas9Ydj0V_8.roa (hash: VMUHx0aBm+eliv6gC59f6sziaecsLoWU430wez2hoIE=)
                          10: ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl (hash: pW3qr4LpVfmgrkUAA5ujitgikPnqO2hDYAeCa4N9bjk=)
                          11: Eek22GdEU2ItdKCh1YObdlsoD5k.roa (hash: gaswunDkYuZN7J6+47ouaQg3DgJOqENiCTS8u6ErvP8=)
                          12: GbfxztoC4PxIpriamUGOUsYOLoQ.roa (hash: CGoqVJUUVPBOCWck1qYIwC76siC82roJNmBmQZOYeN8=)
                          13: ITs1JB43D_FheirENassyvGaNmM.roa (hash: sCmDJPrQhdQ800CIqqhPa6WjrKtwLWb9FeYCKXLvTts=)
                          14: JpdfzyAj14iOzB4Z5PnVvunNej0.roa (hash: /UuMkOmmWARuFdd2KOheEooFXIA8GUTJNN5j/Yiq1gQ=)
                          15: LAUMjPelZQrvZ41jdQLcbvcS8uA.roa (hash: X9SlYNAEbAhHo9wgS73MfkHrHkGnFKlY6aySb26m8XI=)
                          16: QsajEbH_vncDgIqDC90Q4m8Svd4.roa (hash: 3jBCP0pEX5o1QJTHsIOvsTaNMQhdQSSsUOXuTWEKs18=)
                          17: RPMONOLNHIlaU0E7nMfOfY73qJQ.roa (hash: TWZ9Ac+MKN6ertGvphHRsgkqV3QN/JjpO8Xt9bBur90=)
                          18: RhCyLhmVx9srh9SlOdCHEMgrbb0.roa (hash: OlUi52meJz27iODJVNfeyZmeqaSwlvaeu3sX1+ofpwE=)
                          19: RoAoJoN_CohxIZy4yQ_oVMpUdvo.roa (hash: NoeK6ahdGG1ZwohT2negPWcCcl1uxH0vuwi7RnUeCqE=)
                          20: UhV7AKYHClghVf5_R11P9BlWhCs.roa (hash: gKMNPMefhs5AuI6ROCs5poMTPSdzDvo6qIsCWXQN/4o=)
                          21: WpaCvl94AB4Mm5FaDFys_8DXe24.roa (hash: 477j2pHJIvTksycnhJv7i/zxHiCAGm1LeI4a47fj444=)
                          22: YIPpOKTWJ4m4O8CysHr1b3q0FvI.roa (hash: 4yCEv8/TyuH71dBgCWtO+PS58wz8SlWAwKr+93MYeag=)
                          23: Zb5pMXfg--CmManj5Qwpn5CKkos.roa (hash: eIV46twY5i9xSkrwsrHFEFZ9zt5eGM2y2+fF5jawtIw=)
                          24: b6CM4zaHBMFgcckQhy1a-6lsJo0.roa (hash: j+pqQrD2D813OsFZiGJXVZW7gesEqtcN5p1BQq3S9NM=)
                          25: b6H05lWHtdjY2vCwxVdBXknxztw.roa (hash: g13DHJLhGFXnhVEJBVTHO8LGnVofTYPYCYq9dclxchk=)
                          26: d1pln0kLLx23KocnvvY-SPQr91U.roa (hash: R5QoSMVcrIeSzRcd1l69fHtrOauxJBzvfJ4VxGfdaIA=)
                          27: e4D00VQ73tO0WZdv_LXLHwiAnew.roa (hash: IuTx9iBP1j+PgqHCAGgFvdWnuoeoCvDxSBt0PQoGwPI=)
                          28: e9vfVMqMiQAxVQmlt0K8ZmlXqTA.roa (hash: 27AoPhmvcJr+eIMgduyygSuno+hjgMffDSNU+2BsnOE=)
                          29: f95txCXVFZI1LBpVFmwRAf6BrC0.roa (hash: ooWDkP90q/x0biy/+MXCtr4sJju/bMfuF+num+i4Hbg=)
                          30: fHnL3ZpdOP9YTDThe3uP28UwBoA.roa (hash: Nnz1JzPtwqgJbxYKshxKIJ2bLlCCqoKABTp/7IGm4C4=)
                          31: knGSWmZ3k78JRwIoq7I4RG51JOs.roa (hash: i78eWNWKJfq8BhMhgx/Xy3UHuxKJwWXVNclbpllZ7Gk=)
                          32: p0sVKT9H_CrRbh9MeUsCSAzDIzk.roa (hash: Qvx98UdrehrdYxzNyDeZhGbUAauszlAZyI7IKseL6lY=)
                          33: pvxEKtdjVn9y2lCl3L1ALRnISIw.roa (hash: Nv9tOPDgwJ/F/1eSSDZErb1GU5F/sAxDIvc6NPhFQPc=)
                          34: sXKYnxzxkWh3Kq6_2Z4RRDTd94E.roa (hash: SnmZnihQGv3oG+V4PIwfJQLOrrmw6r7IMKtT00rOjWw=)
                          35: tu44eswNZGFYex5tK10QOJ433zQ.roa (hash: mEmufSIlHKCAaXCOwiKvsOOGAv1xUrJo8JS2arA75sc=)
                          36: y2JsUpNhRugXNnY_cLNe8Dztetc.roa (hash: aFAHB+viTREQ1oj0DIQBi8+mG7liy39cmbSO25mmalc=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 15 01:31:56 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F1517B8309F4B62E9A971015ABBBD5B21DAFA0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:ec:42:d2:1b:98:28:f4:69:bc:02:3b:04:
                    38:3a:e5:35:11:b9:c1:ea:9b:b1:5e:9f:2d:dd:29:
                    3c:24:12:c7:32:29:fb:8a:8b:25:36:09:96:92:1a:
                    58:ea:cf:b0:f7:08:b9:b2:21:cc:86:40:ed:6a:9a:
                    bf:01:be:14:44:6a:18:89:7b:93:f6:74:ff:e4:fd:
                    3c:07:ea:0f:bd:dc:05:6f:f7:31:5f:56:66:b8:5f:
                    be:b4:b3:1c:7c:c3:f8:c1:dc:be:96:b1:da:71:e4:
                    c7:b6:ac:b5:df:f8:b5:d4:4f:f0:bc:2b:80:be:6a:
                    07:9d:93:55:82:67:42:8b:09:5c:06:08:38:5b:07:
                    54:7a:9e:c8:fa:e2:f8:a1:8e:75:c7:b5:c8:58:57:
                    eb:46:68:e9:1a:b2:96:08:e8:8b:9a:52:66:23:bf:
                    df:3b:16:b9:02:41:a4:8d:7f:76:42:9c:9c:01:85:
                    18:03:b2:a7:86:a3:02:1e:03:de:78:eb:d9:94:43:
                    b2:44:92:5e:6c:d3:be:a3:fe:91:92:e7:ae:6d:3a:
                    88:75:24:00:24:16:77:06:ef:ae:96:54:af:cf:b0:
                    04:cb:c6:a9:e8:62:e3:83:2e:ec:93:31:55:10:89:
                    ab:03:50:05:f9:17:21:c9:e8:b7:0f:16:a6:4d:f6:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:8e:6d:3a:d2:e1:12:1b:a6:c7:c8:91:8a:e8:05:11:08:
         b6:e0:0b:32:66:e6:f4:7e:fd:c3:71:4b:77:e4:f4:48:d7:2f:
         2f:b3:e2:30:70:73:af:ed:60:e0:b5:97:e4:91:81:23:22:61:
         2b:36:0a:4c:b1:d9:1d:a7:c1:b6:39:08:ac:1e:a5:8b:47:b3:
         f2:2c:60:49:7c:77:98:42:59:95:bb:43:8a:a6:d2:9e:9b:18:
         61:57:25:4a:9c:90:2c:ba:de:d8:1d:10:3c:e8:87:ea:be:81:
         11:b0:35:4a:6b:25:e9:6e:0f:16:f4:b1:12:b0:8c:ab:4f:22:
         31:ba:c6:b4:5c:0d:e3:f5:c2:5a:a6:b8:c0:51:24:b9:99:79:
         e9:d8:c6:fb:21:27:cb:69:31:02:a4:2c:f2:2e:d7:17:5c:3a:
         54:e7:5a:12:04:f1:58:f3:9e:c9:27:2a:2a:04:e0:c2:d8:25:
         35:f3:ae:a3:19:56:e9:bc:00:41:82:18:97:c8:f8:a0:e7:ee:
         f6:5a:0a:03:1b:4d:fd:9f:78:7d:95:00:79:7a:72:65:22:79:
         76:ac:ab:b3:34:ce:fa:ad:40:5c:53:ec:02:d9:73:13:64:c8:
         49:c2:db:e2:89:75:4d:b5:f1:4a:da:54:26:dc:2b:5b:75:78:
         d4:b0:ca:62
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDA1MTUw
MTMxNTZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNTE3QjgzMDlGNEI2
MkU5QTk3MTAxNUFCQkJENUIyMURBRkEwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChpuxC0huYKPRpvAI7BDg65TURucHqm7Feny3dKTwkEscyKfuK
iyU2CZaSGljqz7D3CLmyIcyGQO1qmr8BvhREahiJe5P2dP/k/TwH6g+93AVv9zFf
Vma4X760sxx8w/jB3L6Wsdpx5Me2rLXf+LXUT/C8K4C+agedk1WCZ0KLCVwGCDhb
B1R6nsj64vihjnXHtchYV+tGaOkaspYI6IuaUmYjv987FrkCQaSNf3ZCnJwBhRgD
sqeGowIeA95469mUQ7JEkl5s076j/pGS565tOoh1JAAkFncG766WVK/PsATLxqno
YuODLuyTMVUQiasDUAX5FyHJ6LcPFqZN9i2pAgMBAAGjggI9MIICOTAdBgNVHQ4E
FgQU8VF7gwn0ti6alxAVq7vVsh2voKIwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5tZnQw
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAP1o5tOtLhEhumx8iRiugFEQi24AsyZub0fv3DcUt35PRI1y8vs+IwcHOv
7WDgtZfkkYEjImErNgpMsdkdp8G2OQisHqWLR7PyLGBJfHeYQlmVu0OKptKemxhh
VyVKnJAsut7YHRA86IfqvoERsDVKayXpbg8W9LESsIyrTyIxusa0XA3j9cJaprjA
USS5mXnp2Mb7ISfLaTECpCzyLtcXXDpU51oSBPFY857JJyoqBODC2CU1866jGVbp
vABBghiXyPig5+72WgoDG039n3h9lQB5enJlInl2rKuzNM76rUBcU+wC2XMTZMhJ
wtviiXVNtfFK2lQm3CtbdXjUsMpi
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:35 2024 by rpki-client on console-ams.rpki-client.org